anonymous ftp PASS command sent without argument

Bug #334540 reported by A. Bram Neijt
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gvfs
Fix Released
Medium
gvfs (Ubuntu)
Fix Released
Low
Ubuntu Desktop Bugs

Bug Description

Binary package hint: gvfs

When connecting to an anonymous FTP account on an FTP server, the gvfs-backend for ftp does not send an argument with the PASS command. This means that for any RFC959 compliant server will not allow the anonymous entry and send back an error message (501 Syntax error: command (PASS) needs an argument.)

If the server allows for PASS without an argument (against RFC959) everything will be ok, and the anonymous ftp will be mounted without any problem.

When does this happen: always, when connecting with an anonymous FTP server using nautilus.

To reproduce it (this is just how I came across it):
- Install pyftpdlib from my ppa: https://launchpad.net/~bneijt/+archive/ppa
  or download it from http://code.google.com/p/pyftpdlib/
- Download an older version of shareftp [1]
- Run "shareftp -a" (make sure you have python-avahi installed)
- Browse to the ShareFTP share under Network in Nautilus.

[1] http://git.logfish.net/?p=shareftp.git;a=blob;f=shareftp;h=45353b6bee141e4d88f367a2da1ddff6b975e252;hb=be76787aef89a14a4e0ba1cf9fe41eb82c194720

ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
Package: gvfs-backends 1.1.6-0ubuntu2
ProcEnviron:
 SHELL=/bin/bash
 PATH=(custom, user)
 LANG=en_US.UTF-8
SourcePackage: gvfs
Uname: Linux 2.6.28-8-generic x86_64

Related branches

Revision history for this message
A. Bram Neijt (bneijt) wrote :
Revision history for this message
Sebastien Bacher (seb128) wrote :

thank you for your bug report, you seem to have a good technical understanding of the issue maybe you could open the bug on bugzilla.gnome.org directly where the people writting the software will comment?

Changed in gvfs:
assignee: nobody → desktop-bugs
importance: Undecided → Low
Revision history for this message
Sebastien Bacher (seb128) wrote :

thank you for sending the bug there

Changed in gvfs:
status: New → Triaged
Changed in gvfs:
status: Unknown → Fix Released
Revision history for this message
Sebastien Bacher (seb128) wrote :

the issue has been fixed to svn now

Changed in gvfs:
status: Triaged → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gvfs - 1.1.8-0ubuntu1

---------------
gvfs (1.1.8-0ubuntu1) jaunty; urgency=low

  * New upstream version:
    - Fix crashers and leaks (lp: #201519)
    - Handle file:// uris with anchors in gvfs-open
    - fuse: Support ftruncate to the current file size (lp: #234532)
    - escape/unescape hostname part in uris, allowing spaces in e.g. smb domains
    - hal: Fix "No mount object" error on mount
    - Change details of the new .xdg-volume-info file format
    - Fix races in cancellation of gvfs streams
    - Remove debug spew from backends
    - ftp: Fix anonymous login (lp: #334540)
    - gphoto2: Ignore broken storages with no capacity (lp: #326029)
    - Don't globally modify COMP_WORDBREAKS in bash completion script
      (lp: #290784)
    - Don't ask for username when getting ssh key passphrase
  * debian/patches/91_upstream_change_fix_trash_crasher.patch:
    - the change is in the new version

 -- Sebastien Bacher <email address hidden> Tue, 10 Mar 2009 13:02:47 +0100

Changed in gvfs:
status: Fix Committed → Fix Released
Changed in gvfs:
importance: Unknown → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.